Upgrade FreeRadius no longer can connect via OpenVPN
-
Anyone run in to this:
After upgrading PFSense (23.09.01) and freeradius3 (0.15.10_1), this deleted the FreeRadius settings.
After reverting configuration (since the upgrade deleted it) no users can connect to OpenVPN with user with OTP, without getting a Credential Error MessageLogs show the following
Jan 29 17:26:43 azure-tmc-pfsense openvpn[61590]: xx.xxx.xx.xx:56931 [joe_simpson] Peer Connection Initiated with [AF_INET]yy.yy.yy.yy:56931
Jan 29 17:26:58 azure-tmc-pfsense openvpn[1050]: /openvpn.auth-user.php: Error during RADIUS authentication : Operation timed outAny ideas or additional debugging steps
-
This might be helpful to anyone that finds this same type of issue.
After upgrading PFSense (23.09.01) and freeradius3 (0.15.10_1) specifically freeradius3 that wipes out all FreeRADIUS configuration.To fix:
Revert the PFSense configuration prior to the update of FreeRADIUS, under Diagnostics > Backup & Restore
Under Services FreeRADIUS, go through the tabs of NAS/Clients, Interfaces, Settings, EAP and edit them and resave them. View Config should show the FreeRadius Configuration
(Not 100% clear if that was necessary but it appeared to write to the configuration files
ssh to pfsense server sudo su admin, and then invoke shell
Copy /usr/local/etc/raddb/users To /usr/local/etc/raddb/mods-config/files/authorize
Create symbolic link from /usr/local/etc/raddb/users To /usr/local/etc/raddb/mods-config/files/authorize
Need to restart FreeRadius Service from pfsense console -
@bigbmn unfortunately I found this one. There was a bug in the code where it incorrectly defaulted to removing the settings unless the page had specifically been saved.
https://forum.netgate.com/topic/181594/restore-missing-freeradius-config/